This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba8b6b22-7fcd-3bc5-b96d-e91ab8901bdb.roa File: ba8b6b22-7fcd-3bc5-b96d-e91ab8901bdb.roa (raw, json) Hash identifier: 0kATHmV4iaY6fA+uMZjThHi3Prs2XdGt+FZwxYB3UmU= Subject key identifier: 27:D2:3F:2F:82:5C:79:F0:07:94:2E:4D:99:7C:91:E2:C4:CF:76:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E93940712E26DDBDB18CD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba8b6b22-7fcd-3bc5-b96d-e91ab8901bdb.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 33287 IP address blocks: 23.24.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:93:94:07:12:e2:6d:db:db:18:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=f35a3c58-4833-4db0-904c-6fef9d5eb0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:bd:5f:09:de:e4:61:30:f1:d1:12:cb:ee: 94:11:c7:06:85:41:02:44:13:b3:7e:6a:f6:c2:4f: 79:ce:42:7b:94:5f:3d:29:08:52:3c:78:80:eb:35: 4a:17:a9:33:cd:1a:99:42:d5:87:44:11:e1:c9:4d: 91:b5:28:52:09:0f:98:3f:86:ae:9e:e9:37:40:46: 38:59:ba:a9:70:64:c2:15:5c:f6:85:9c:3b:1e:69: e0:1c:66:c0:b8:b3:59:9b:72:d2:e6:54:18:5e:37: 16:b2:c7:39:93:56:c3:40:0b:f5:51:1a:c3:58:26: ab:a7:3c:08:8e:10:6f:cf:0c:65:c8:9a:27:29:e5: 1c:ed:70:61:e8:ad:4a:4c:5b:51:17:fa:4b:30:e6: 9f:5a:ce:ac:1c:33:62:86:fb:b4:19:af:cb:26:72: c1:b8:a4:10:1e:e0:67:a5:c2:d6:74:b1:1a:0b:52: a6:b3:6a:1b:5d:a3:23:32:b8:0c:75:95:60:ca:4d: d8:b4:ed:03:77:94:73:b1:d8:7d:19:dd:23:c6:ef: ec:36:ca:9e:d3:9a:1a:32:50:b1:28:30:6e:d2:6c: 8e:14:87:be:f1:3b:8f:3b:0a:b5:19:c2:d0:d2:6d: f3:64:4a:95:1b:c8:b0:48:15:03:97:04:19:a7:3e: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:3F:2F:82:5C:79:F0:07:94:2E:4D:99:7C:91:E2:C4:CF:76:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba8b6b22-7fcd-3bc5-b96d-e91ab8901bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 23.24.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:17:9b:6e:19:ea:86:8c:6c:f8:60:ae:0d:67:9b:b7:c6:c3: 76:0b:6c:da:3d:21:fd:df:12:4d:67:fe:e7:10:a8:ed:36:2b: b2:99:37:8e:f0:51:45:4b:7e:a6:7c:af:f4:91:df:1d:00:ff: 6a:40:c5:cc:33:8f:9d:20:cd:4c:47:20:b0:6f:36:1e:a2:38: b0:3b:c9:8d:93:8d:e3:23:f9:a6:17:ba:da:2f:6a:3e:73:30: 22:3b:d6:8a:6e:f7:43:2a:74:8a:39:53:82:5c:1a:41:de:ba: 2a:6e:a7:be:e8:6b:30:c6:8c:f6:8a:96:12:dc:51:bc:6a:81: 6a:15:df:a9:fb:fa:b8:50:75:c9:6d:c8:21:4a:d2:c2:4f:5f: 82:f1:5f:e0:70:02:5f:03:f3:54:8a:98:57:c6:04:6b:fd:36: f4:98:12:9e:b2:af:3e:a5:30:3d:dd:d8:15:9f:11:08:25:06: 72:90:56:5a:25:2d:07:f4:24:94:9e:63:4f:37:36:d3:95:74: fc:e9:7a:61:43:f0:60:7a:8e:ae:3e:82:dd:9a:64:5d:b2:2a: ae:61:76:96:aa:19:cd:f3:44:69:4d:d6:04:c8:1a:11:a3:0c: 5e:57:9d:11:b5:02:52:c6:2b:83:5f:09:5f:78:d3:09:36:54: 4d:2a:7a:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwek5QHEuJt29sYzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk ZjM1YTNjNTgtNDgzMy00ZGIwLTkwNGMtNmZlZjlkNWViMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOO9Xwne5GEw8dESy+6UEccGhUECRBOzfmr2 wk95zkJ7lF89KQhSPHiA6zVKF6kzzRqZQtWHRBHhyU2RtShSCQ+YP4aunuk3QEY4 WbqpcGTCFVz2hZw7HmngHGbAuLNZm3LS5lQYXjcWssc5k1bDQAv1URrDWCarpzwI jhBvzwxlyJonKeUc7XBh6K1KTFtRF/pLMOafWs6sHDNihvu0Ga/LJnLBuKQQHuBn pcLWdLEaC1Kms2obXaMjMrgMdZVgyk3YtO0Dd5Rzsdh9Gd0jxu/sNsqe05oaMlCx KDBu0myOFIe+8TuPOwq1GcLQ0m3zZEqVG8iwSBUDlwQZpz4nzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfSPy+CXHnwB5QuTZl8keLEz3ZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE4YjZiMjItN2ZjZC0z YmM1LWI5NmQtZTkxYWI4OTAxYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGFxgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQXm24Z6oaMbPhgrg1nm7fGw3YLbNo9If3fEk1n/ucQqO02K7KZN47w UUVLfqZ8r/SR3x0A/2pAxcwzj50gzUxHILBvNh6iOLA7yY2TjeMj+aYXutovaj5z MCI71opu90MqdIo5U4JcGkHeuipup77oazDGjPaKlhLcUbxqgWoV36n7+rhQdclt yCFK0sJPX4LxX+BwAl8D81SKmFfGBGv9NvSYEp6yrz6lMD3d2BWfEQglBnKQVlol LQf0JJSeY083NtOVdPzpemFD8GB6jq4+gt2aZF2yKq5hdpaqGc3zRGlN1gTIGhGj DF5XnRG1AlLGK4NfCV940wk2VE0qehw= -----END CERTIFICATE-----Generated at Sat Dec 20 06:25:07 2025 by rpki-client